RE: Firewall service and Cisco IP TV

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 17 Nov 2003 19:33:48 -0600

Hi Thierry,
 
OK, it will work with ISA, however the clients must have the firewall client 
installed, because it does sound like secondary connections are required. So, 
if the CiscoTV is software that runs on Windows OS's then it'll work. If there 
are dedicated devices of some sort, then it won't work because you can't 
install the firewall client on them. However, if they support SOCKS 4.3a and 
you can configure the proper protocol definitions, the SOCKS proxy (filter) can 
manage the complex connecitons. You just have to make sure that authentiation 
is not required for the Protocol Rule you create to support the dedicated 
devices.
 
HTH,
Tom

  _____  

From: LEVESQUE THIERRY FTRD/DMI/REN 
[mailto:thierry.levesque@xxxxxxxxxxxxxxxxxxxx] 
Sent: Monday, November 17, 2003 9:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall service and Cisco IP TV


http://www.ISAserver.org

Hi Tom, 
 
Thank you very much for your answer.
I have experimented Cisco IP TV through a socks proxy: it didn't work.
Inside Cisco IPTV dialogs, through the  rtsp protocol, Cisco IP TV client and 
server negotiate UDP connection ports. The server sends packets to the client 
according to the negotiation. It seems that a socks proxy can't relay UDP 
packets to a client that don't have a UDP destination port equal to a UDP 
client call source port that has been previously relayed.
 
I'm glad to see that with Winsock proxy (Firewall service) it works.
 
Thierry
 
-----Message d'origine-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Date: mercredi 12 novembre 2003 02:56
À: [ISAserver.org Discussion List]
Objet: [isalist] RE: Firewall service and Cisco IP TV



        http://www.ISAserver.org
        
        Hi Levesque,
         
        Why don't they work with SOCKS? What is the technical problem with it? 
With the Firewall client installed, you can access any protocol, regardless of 
how complex, through the ISA firewall.
         
        HTH,
        Tom
        www.isaserver.org/shinder
         

  _____  

        From: LEVESQUE THIERRY FTRD/DMI/REN 
[mailto:thierry.levesque@xxxxxxxxxxxxxxxxxxxx] 
        Sent: Monday, November 10, 2003 5:01 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Firewall service and Cisco IP TV
        
        
        http://www.ISAserver.org
        
        
        

                -----Message d'origine----- 
                De:     LEVESQUE THIERRY FTRD/DMI/REN 
                Date:   lundi 10 novembre 2003 11:47 
                À:      'isalist@xxxxxxxxxxxxx' 
                Objet:  Firewall service and Cisco IP TV 

                Hi, 
                I knew that CISCO IP TV calls don't work with socks proxy. 
                Is there the same problem with the Firewall service (Winsock 
Proxy protocol) of ISA? 
                More generally where can I find a list of applications that 
don't work with the Firewall service of ISA. 
                Thank you very much 

        ------------------------------------------------------
        List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to $subst('Email.Unsub') 
------------------------------------------------------
        List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
thierry.levesque@xxxxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: